$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hfDS2j10s8YTxJAvEaVvF0_kEqw.roa File: hfDS2j10s8YTxJAvEaVvF0_kEqw.roa (raw, json) Hash identifier: Od2U0ZLSWlvdD80T8kvpeK1ohJY/6IuTOmkB7BdlGS0= Subject key identifier: 85:F0:D2:DA:3D:74:B3:C6:13:C4:90:2F:11:A5:6F:17:4F:E4:12:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A47 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hfDS2j10s8YTxJAvEaVvF0_kEqw.roa Signing time: Sun 30 Jun 2024 01:48:26 +0000 ROA not before: Sun 30 Jun 2024 01:48:26 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 49.108.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:26 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=85F0D2DA3D74B3C613C4902F11A56F174FE412AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f4:83:66:14:d9:9b:e2:ee:64:99:b6:46:3f: bf:61:4b:de:53:22:4d:ce:62:b3:06:86:02:88:24: b3:53:a3:d1:d1:75:6d:36:13:03:fc:1f:d0:16:f1: c8:f9:67:81:e7:d4:d5:95:2c:73:97:7f:08:19:83: cd:b0:f8:85:59:eb:d7:ee:a3:ec:df:e4:b7:49:ab: 23:8f:5e:85:2f:8b:66:85:43:99:0b:60:49:3f:b7: 62:ba:79:b3:d2:0d:ec:d7:22:8c:52:1a:d5:2d:c1: 13:c1:44:08:1d:e2:91:bc:7e:a5:4b:4f:d4:44:f1: ce:e8:f6:e0:b1:74:c6:a9:b2:11:ed:1d:00:43:1d: 79:05:c9:89:7f:d7:66:98:da:ac:66:85:ba:ff:c1: 20:44:50:91:70:91:78:fe:be:f2:ee:aa:e5:0c:47: e9:74:6f:d8:fe:63:c6:e2:d9:45:44:23:7c:28:1e: 40:5e:0e:f9:d2:fd:2c:87:61:37:1e:c6:86:39:da: df:02:9d:d6:50:ff:c3:01:93:57:6f:67:7f:65:7c: 41:58:c1:97:80:87:91:09:62:a9:76:b0:b5:84:b8: c4:49:0d:d4:0a:58:16:86:69:fc:14:35:15:69:53: 8a:c5:47:b5:7e:c7:18:d4:0c:a2:8d:ba:6a:44:5c: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:D2:DA:3D:74:B3:C6:13:C4:90:2F:11:A5:6F:17:4F:E4:12:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hfDS2j10s8YTxJAvEaVvF0_kEqw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.225.0/24 Signature Algorithm: sha256WithRSAEncryption aa:84:b7:c9:7c:3a:c0:35:81:97:7a:19:8a:7d:0e:c6:89:77: ad:7a:30:8d:56:85:60:9d:b0:0a:81:5f:36:61:d2:69:37:df: ce:09:21:9c:ef:ae:48:e8:4c:9a:87:6d:31:dd:df:bc:84:94: af:8a:a9:72:80:7b:29:e8:58:89:af:a5:19:62:b9:a9:28:64: de:1e:93:a0:6b:fc:f8:e5:74:3e:5b:f1:ff:a1:00:c9:72:d7: f3:87:51:52:2f:7d:aa:04:b8:d7:40:2f:2f:52:f8:76:69:c9: 07:43:c4:1c:22:ba:ee:a1:5b:6c:b6:7d:de:a7:63:a6:ca:f7: 0a:ef:eb:2b:87:d8:bd:b0:4d:0d:48:da:92:4a:fe:35:28:71: 43:73:d5:9e:20:bd:87:d1:6c:56:0d:7f:3f:4f:44:2c:5a:6a: 8a:13:61:7f:fa:1b:18:c6:fa:cc:63:a9:53:6f:58:3c:fd:51: ae:f5:dc:a3:ca:05:12:94:c8:b2:55:78:c8:2e:05:2d:cb:9f: 19:0b:5c:44:64:ba:f6:76:df:af:1a:01:e5:d4:94:6d:d4:65: 63:d9:57:08:68:6b:12:ad:cc:02:0b:10:f4:18:1a:fa:24:3d: 0b:7f:68:3d:ba:36:12:fd:e4:6d:3a:78:ea:e4:cd:60:57:c4: a4:ce:b7:bf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MjZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDg1RjBEMkRBM0Q3NEIz QzYxM0M0OTAyRjExQTU2RjE3NEZFNDEyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw9INmFNmb4u5kmbZGP79hS95TIk3OYrMGhgKIJLNTo9HRdW02 EwP8H9AW8cj5Z4Hn1NWVLHOXfwgZg82w+IVZ69fuo+zf5LdJqyOPXoUvi2aFQ5kL YEk/t2K6ebPSDezXIoxSGtUtwRPBRAgd4pG8fqVLT9RE8c7o9uCxdMapshHtHQBD HXkFyYl/12aY2qxmhbr/wSBEUJFwkXj+vvLuquUMR+l0b9j+Y8bi2UVEI3woHkBe DvnS/SyHYTcexoY52t8CndZQ/8MBk1dvZ39lfEFYwZeAh5EJYql2sLWEuMRJDdQK WBaGafwUNRVpU4rFR7V+xxjUDKKNumpEXLqdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhfDS2j10s8YTxJAvEaVvF0/kEqwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hmRFMyajEwczhZVHhKQXZFYVZ2RjBfa0Vxdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxbOEwDQYJKoZIhvcNAQELBQADggEBAKqEt8l8OsA1gZd6GYp9DsaJd616 MI1WhWCdsAqBXzZh0mk3384JIZzvrkjoTJqHbTHd37yElK+KqXKAeynoWImvpRli uakoZN4ek6Br/PjldD5b8f+hAMly1/OHUVIvfaoEuNdALy9S+HZpyQdDxBwiuu6h W2y2fd6nY6bK9wrv6yuH2L2wTQ1I2pJK/jUocUNz1Z4gvYfRbFYNfz9PRCxaaooT YX/6GxjG+sxjqVNvWDz9Ua713KPKBRKUyLJVeMguBS3LnxkLXERkuvZ2368aAeXU lG3UZWPZVwhoaxKtzAILEPQYGvokPQt/aD26NhL95G06eOrkzWBXxKTOt78= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:46 2025 by rpki-client